express 220 firmware vulnerabilities and fixes

Recent CVEs affecting express 220 firmware, with upgrade or downgrade steps. 1 tracked.

Also searched as: express220firmware.

express 220 firmware has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-01-22. Highest priority: CVE-2018-17981 (score 40/100).

• CVE-2018-17981 MEDIUM 6.1 MITIGATE MITIGATE Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter.

FAQ

How do I fix express 220 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is express 220 firmware being exploited right now?

None of the tracked express 220 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which express 220 firmware CVE should I patch first?

CVE-2018-17981 currently ranks highest (40/100): Lifesize Express ls ex2_4.7.10 2000 (14) devices allow XSS via the interface/interface.php brand parameter..

← Back to latest CVEs